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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

• If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 18 March 2004 . 
2a)S This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) 13 Claim(s) 7-75 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1-4.6 and 12-15 is/are rejected. 

7) [3 Claim(s) 5 and 7-11 is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim forforeign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1 . Claims 1 - 1 5 are pending. 

2. The terminal disclaimer filed on 3/18/04 disclaiming the terminal portion of any patent 
granted on this application which would extend beyond the expiration date of 09/621056, 
09/621057, 09/621058, 09/621059, and 09/621060 has been reviewed and is accepted The 
terminal disclaimer has been recorded. 

3. Claim 5, 7-1 1 is objected to as being dependent upon a rejected base claim, but would be 
allowable if rewritten in independent form including all of the limitations of the base claim and 
any intervening claims. 

Claim Rejections - 35 USC §103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 
of this title, if the differences between the subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1,2,4,6, 12-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bellare et al. 
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In reference to claim 1 : 

Bellare et al. (Section 4, NMAC) & (Section 5, HMAC) discloses an authentication method, 
comprising: 

• Generating a plurality of authentication tags for a message, each of said plurality of 
authentication tags reflecting a different authentication strength, where the plurality of 
authentication tags includes the intermediate value computed for either the NMAC or 
HMAC, and the final value of the HMAC or NMAC itself. The differing strength is 
discussed through the various attacks on which either the intermediate value or MAC 
may be susceptible to. 

Bellare et al. does not specifically disclose a method comprising: 

• Transmitting said plurality of authentication tags in association with said message to at 
least one receiver 

The Examiner takes official notice that sending intermediate results of computations to another 
computer to complete the computation was well known in the art at the time of invention. 
In fact, dividing a complex computation too to share the load with other computer is one of 
foundations of distributed computing. This is also a prevalent model in computing with 
client/server models where oftentimes, a greater burden of a given computation will be set on the 
client so that the server can better tend to other client requests. 
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Bellare et al. (1.1 Authenticity and MACs, pages 2) farther teaches that in order for a MAC to be 
verified, the receiver must also compute the value of the authentication tag. 
It would have been obvious to one of ordinary skill in the art at the time of invention to send the 
intermediate result of the authentication tag computation to the receiver of the message given 
that the receiver needs to compute the fall authentication tag in any case, and to lighten the 
computational load or burden on the receiver or alternatively to provide another value(the inner 
result is still a MAC) with which the receiver can compare to authenticate the sender. 

In reference to claim 2: 

Bellare et al. (Section 5, HMAC) discloses a method wherein one of said plurality of 
authentication tags is generated using a hash-based message authentication code algorithm. 

In reference to claim 4: 

Bellare et al. discloses a method wherein one of said plurality of authentication tags is generated 
using a partial message authentication code algorithm, where a partial MAC is generated by the 
inner function of either the HMAC or NMAC. 

Claims 6 is rejected for the same reasoning provided by the combination within claim 1 . 
In reference to claim 12: 

Balenson et al. (page 22) discloses all of claim 12 except an authentication method, comprising: 
• Receiving a plurality of authentication tags 
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• Selecting one of said plurality of authentication tags 

Bellare et al. (1 . 1 Authenticity and MACs, pages 2) further teaches that in order for a MAC to be 
verified, the receiver must also compute the value of the authentication tag. 
It would have been obvious to one of ordinary skill in the art at the time of invention to send the 
intermediate result of the authentication tag computation to the receiver of the message given 
that the receiver needs to compute the full authentication tag in any case, and to lighten the 
computational load or burden on the receiver or alternatively to provide another value(the inner 
result is still a MAC) with which the receiver can compare to authenticate the sender, effectively 
having the receiver selecting the inner MAC to lighten the computational load. 

In reference to claim 13: 

Bellare et al. discloses all of claim 13 except a method wherein an authentication tag is selected 
based upon a desired authentication strength. 

It was well known to those of ordinary skill in the cryptographic arts that the more cryptographic 
computation performed on a message, the stronger the authentication strength. Additionally 
Bellare et al. (1 . 1 Authenticity and MACs, pages 2) further teaches that in order for a MAC to be 
verified, the receiver must also compute the value of the authentication tag. 



It would have been obvious to one of ordinary skill in the art at the time of invention to select an 
authentication tag based on its strength in order to lighten the computational load. Selecting a 
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stronger authentication tag would require more computation on the part of the verifier since 
Bellare et al. teaches that the verifier/receiver has to compute the MAC to compare the two. 

Claims 14 and 15 are rejected for the same reasoning provided by the combination within claim 
1. 



6. Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Balenson et al. and 
Black et al. 

In reference to claim 3: 

Bellare et al. discloses all of claim 3 except a method wherein one of said plurality of 
authentication tags is generated using a universal message authentication code algorithm. 
Black et al. discloses the UMAC algorithm used for message authentication codes. Black et al. 
(Section 1, Introduction) teaches UMAC has been designed extreme speed and provable security 
in mind. The speed of UMAC is much faster than HMAC-SHA-1 and faster than MMH by a 
large margin. 

It would have been obvious for one of ordinary skill in the art at the time of invention to 
apply the UMAC algorithm to the nested MAC or HMAC system given, it's specific design for 
extreme performance while retaining provable security. 
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Conclusion 



7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy 
as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of the final action and the advisory action is not mailed under after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension pursuant to 37 CFR 
1 . 1 36(A) will be calculated from the mailing date of the advisory action. In no event, however, 
will the statutory period for reply expire later than SIX MONTHS from the mailing date of this 
final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas M Ho whose telephone number is (703)305-8029. The 
examiner can normally be reached on M-F from 8:30am - 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gregory A. Morse can be reached at (703)308-4789, The fax phone numbers for the 
organization where this application or proceeding is assigned are (703)746-7239 for regular 
communications and (703)746-7238 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is (703)306-5484. 



TMH 



k " GREGORY MORSE 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 
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